JFrog at swampUP 2026: betting on trust in the AI era

On September 2, 2026, JFrog presented its investor briefing at the swampUP 2026 conference, emphasizing the evolving nature of software development in the AI era. The company highlighted the growing importance of binaries, AI agents, and automated governance over source code alone. JFrog's management argued that manual compliance and security checks are becoming increasingly challenging to maintain as code generation speeds up.

The company aims to transition from binary repository management to a broader software supply chain control platform focused on three goals: protect, remediate, and control.

Key highlights from the event included the introduction of fresh product launches, stronger security sales, and a more ambitious market vision. JFrog sees itself evolving into a system of trust for software supply chains in the AI era, with security becoming a significant part of the business. The company reported that 80% of its million-dollar-plus customer wins in the quarter included security features.

JFrog unveiled new tools for traffic control, compliance, runtime security, and zero-touch remediation. The company's AppTrust platform is being leveraged by Keysight Technologies to ensure compliance while maintaining development speed.

JFrog's leadership stated that the software industry is moving towards a world where AI agents create, consume, and distribute more code than human developers. In this context, the main issue is not just finding vulnerabilities but controlling what enters the system, tracking its progress, and quickly fixing issues. JFrog's CEO, Shlomi Ben Haim, described Artifactory as the system of trust for what happens to the software in the supply chain and positioned the company as the provider of the infrastructure needed for AI or software supply chain operations.

This shift in focus is driven by trends such as AI coding tools increasing software creation speed and volume, the need for centralized governance across multiple agents and tools, regulatory demands for compliance, and the desire of security teams for faster remediation.